Including the specs for authentication and handling when the user doesnt have the controller