complete authentication specs