added tests for user authentication