user auth, logout, tests