adds test for undefined user >> expect code 400