correct ObservationController spec authentication issue