user authorization test. Currently dead code.