add user testing for auth