added authorization.spec test? with 100% coverage