spec checkauth