add authcodespec
fix tests
add clientspec
add withfakeapp class