finished auth redirect spec