add spec file for auth tests