more user service tests to verify authentication failure scenarios