updated roles and improved specs to clarify who is logged in
added timecop freeze to two tests
added authorization to many controllers
updated version