User is fixed to luchux instead of request.user until login working