user authentication and tests