Authorization tests clean up

- Made controller types used in authorization tests abstract, because
their methods are not used.