uml up to spec authentication