removed pre-existing authorization on users - replaced with c3 and fixed tests.