Spec out frontend auth