CHANGE: updated spec for auth service