added authorization test with cutom user model