added tests for user auth