test authentication in module models.user