add authenticated requests to spec