complete testing for updateUser()