Correct controller specs HTTP verbs