full testing authSpec.js