test(auth): remove storage handling from spec, use service api