Issue user auth

Authorization tests for resource 'user'

Refs #717