user authentication flows tests