Authorization feature / controller tests fixed

Closes #40