test: add tests for new User.html_filter_policy()