refactored feature to make it more decaritive
pulled authorize logic out to application controller
pulled authorize logic out to application controller
fixing broken spec - was checking for flash notice and not flash error