Write authorization tests for users controller