authentication spec