changes to rspec auth tests