refactor auth to use new spec
bump version