add spec for UserService.fetch
Add spec for authorization and remove duplication
fix login method
Change the way we upsert a new user