User API tests and better protect user.