Clean up controller specs

- BaseController and FrontController
- We no longer set the User admin field when creating a new user
- We no longer have a check for a valid auth token WITHOUT a user (does not seem possible)

[#74579312]

Signed-off-by: Joseph Palermo <jpalermo@pivotallabs.com>