Auth feature specs

Fixes #31