Add specs for user authentication