def METHOD_NAME(self, app, auth_client_header, user):
    url = f"/api/users/{user.username}"
    payload = {"email": "fingers@bonzo.com", "authority": "nicetry.com"}
    res = app.patch_json(url, payload, headers=auth_client_header)
    assert res.status_code == 200
    assert res.json_body["email"] == "fingers@bonzo.com"
    assert res.json_body["authority"] == "example.com"