Update oauth controller specs

* syntax was moved from `should` to `expect`
* sample app routes were changed from having numbers to names of providers
* code duplication removed