updated auth spec