Add missing spec coverage for related resources operation

[valscion]

I discovered that this simple scenario wasn't tested properly when working on JR 0.10 support here:

• https://github.com/venuu/jsonapi-authorization/pull/143