add pending specs for authenticated API