added some authentication pieces and corrected specs