add tests for user pages authorization