Better validating in specs.  Add failure route specs.  Add invalid credential specs