added more authorization tests, cleaned up users and auth feature tests