wip: test authentication in module models.user