it "should not show private gardens to ordinary users" do
      private_garden = FactoryBot.create(:garden,
                                         user: @other_user,
                                         is_private: true)
      get :show, params: { id: private_garden.id }