test #middleware_user #middleware_password