Added brief test spec and to-do list
Merge branch 'master' into more-auth-tests