Better current_user feature coverage

There were no specs covering how we decided what kind of user our
`current_user` was. Just add a couple just to have a little bit more
sanity.