user tests, except for external auth, working now