add spec tests for manage_user