kinda fixed the auth specs