Fixed specs for Auth.authenticate