modify package.json
rewriting AuthAPI spec
finish auth spec