controller spec coverage for memberships