User management is implemented but need to be tested