add feature specs for registration/authorization