OP SecurityITest for ROLE_APPLICATION pass, not yet testing ROLE_USER