Add basic specs for ImportBatchesController

Also move the shared examples for a user without permission into
AuthenticationControllerHelpers.