added spec for existing user, new authentication