api and tests paired back as auth is had led via user in service setup
tests all run with user integration and hakken