User authorization e2e