authentication service specifications

We have just published a PR with the definition of a new authenticate service defined to suite the needs of GovStack. This PR is open for comments.