Secure app with user permissions; add specs to confirm permissions are configured correctly

I mean at the top just below the instantiation of @app (@app = App.new(...))