Add authentication spec