Add the rspec-rails dependency
Send a 403 Forbidden error when the user is not authorized to access a resource
Add the attendance list and its relationship to the User model
Test the User and Attendance models