Pull authenticated user by primary key

instead of the non-existant user_id property.
Added a user_id AutoProperty to auth.User.