added tests for controller and method
Merge pull request #68 from vegar/resource-authorization-tests

added tests for controller and method