add test for is_owned_by? user model method