adjusted authentication spec