tweaks to authentication spec, remove extra private column, private items tests, sign in as user
sign in as user, see inquiries