Create authorization_spec.rb