Update controller authorization and specs

Controller authorization for Admin, Teachers, Students and guardians
have been refactored and updated to include shared examples.