tests if username is returned in the payload
lays out auth tests