#9 - Conform to RSpec tests in products controller

- added user ownership and session state validation