Added tests for User object. Updated User object to throw
BadMethodCallExceptions when no authenticatingInstitutionID,
principalID, or principalIDNS are present