update: set default photo url and lvl
enhancement: tests for UserService (using Mockito)