authorisation rspec is done

Signed-off-by: mfebrianto <michaelfebrianto@gmail.com>