test user login, added authorization in header