Improved specs for authenticator (but still needs improvement)