moving tests to specs
figuring out auth