first passing specs for basic user authentication and authorization stuff.