these tests were already in place and since it's a security fix we shouldn't bother with rspec conversion at this point.