complete specs for authentication, wrote users_controller_specs and sessions_controller_specs