added specs for oauth login