require authentication for announcement actions
test authenticated actions via shared example

DRY up some controller specs to test for 302 status code. Decided
against making verifications that models are not actually saved. The
fact that a 302 has been explicitly set should suffice for now.