TRACKR-240 - Enable employees to download expense reports

Changed security expression
Added test