fix authentication specs