adding a create/delete userPrevilage method, running the test as non admin user