first two specs, authentication spec helpers