Fixed spec, progress in API auth