seeded test users into db, and added authorization