updates to user auth and tests