refactor in report.rb
added two tests to authorized_user_spec