added auth spec