spec: add specs for auth_scheme