specs added for user authentication