added auth feature spec (ALL TESTS PASSING)