test_user only returned for signed rq auth if exists