Changing tests to Specs and splitting off auth(z)