auth injection fix for specs