Message authentification bug resolved.
User controller has all tests, all passed.