added authentication specs