mock the users object so that tests can run without permissions