Controller specs built, some not working until authentication is considered