Spec for authentication-manager:getUsers() -- need many more still.