update user auth tests to be more robust

* uses only one user for all tests
* removes the user from the database after each test
* each test sets up its own parameters