authenticator and spec