try refactoring auth helper
renaming ivars
add create spec
switch to expect syntax