Added: user auth spec