pass req to user.post instead of req.body, enhance fixtures