added test case to userAPI for security concerns