hotel controller user access testing