Basic applicant authorization spec