updated tests to use User.authentication() instead of helper