Authorization framework + user management tests

User authorization has been refactored to use new authorization
framework, so the dedicated API within the app is no longer required.