Added specs for existing endpoints, test auth