add user authentication test
get test to pass by adding authentication/validation in model