begin adding user, session and authentication specs