add the test user with no role cannot access anything