Hi Dan,
You might find these links helpful when spec’ing restful auth
http://www.vaporbase.com/postings/Rspec_1.0_and_Restful_Authentication
http://jonathan.tron.name/articles/2007/01/02/rspec-on-rails-restful-authentication
http://www.caboo.se/articles/2006/10/29/rspec-on-rails
Keith