DRY out user creation into a factory
update url regeneration use new authentication feature