Improve specs for authentication and users