Added users and tests for forbidden - atst removed should as dependency