wrong user spec'd in test - result still passing