test User#authenticate