Add spec for authorize method