user withdrawal and deposit tests