Specs, stubbed auth