added authorization tests, admin, edit user