update authorization specs
update model specs
refactor controller specs
remove conditions in controller authorization
remove reports_count
:of instead :for
:with instead of :for
visitor to other user