User controller spec support for authorization added for visitors, users and admin