update tests and fix user auth