[Issue #3] More specs

  - Added more specs checking destroy dependence between boxes and links
  - Added more specs checking actions that are not allowed without a valid session