setting up rspec devise also user, authorization models