Update spec wording. FIx unauthorized user test