fixed authentication_spec, see comments in authentication_spec.rb