Well, users aren't returned
Remove wrong form token stuff
Test user factory