Issue user auth

Authorization tests for resource 'user'