Use authorizable? instead of acl_enabled to determine if a model is subject to authorization
Updated specapp to v 6.6.x