make tests for both auth and custom user