diff --git a/common/models/user.json b/common/models/user.json
index f3280c99..4f8d63d7 100644
--- a/common/models/user.json
+++ b/common/models/user.json
@@ -75,7 +75,7 @@
     {
       "principalType": "ROLE",
       "principalId": "$everyone",
-      "permission": "ACL.ALLOW",
+      "permission": "ALLOW",
       "property": "confirm"
     },
     {
diff --git a/test/user.test.js b/test/user.test.js
index c08465a0..2d2c4a32 100644
--- a/test/user.test.js
+++ b/test/user.test.js
@@ -28,6 +28,7 @@ describe('User', function(){
   });
   
   beforeEach(function (done) {
+    app.enableAuth();
     app.use(loopback.token());
     app.use(loopback.rest());
     app.model(User);