authenticate spec with some shared context for account/api