Redoing auth to use JSON web tokens; redoing user tests accordingly