auth manager spec