user object fully tested. Testing individual users are fetched via .find() when extended attributes are requested.