fixed permissions controller spec. decided i don't need the pending ones.