Add spec, fix weird email basic auth overlap