Small fix in auth, finish testing User model