added a spec for middleware/auth/dsl