tests for User authentication and authorization