Extract Authorization header checking to before_action and shared_examples.
Cleanup CandidatesController spec, test secured route handling for candidates.
Cleanup RolesController spec and test that the route is secured.
Start cleanup of UsersController spec, test secured route of show and index.
Secure levels and languages.
Secure submissions.
Extract fake_env to a spec helper.
Move UserHelper to helpers dir.
Secure AssessmentsController and cleanup spec.
UserAwareController is now a SecuredController so doesn't need to worry about any Authorization header handling.
Merge pull request #26 from cyrusinnovation/session_handling

Session handling