adjust spec to ensure un-authenticated users cannot create movies.