Spec to verify that the Auth API contract is followed by the SecurityContext; Convert "console.log" statements to "$log.debug" in the SecurityContext