testing authentication method for User Object