got some auth specs