bypass authorization by setting app.config["LASTUSER_TEST"] and app.lastuserdata and app.lastusertoken