User API tests with no auth key