updated some auth specs