test user works in always_auth mode, woot