You don't need to set the request user here, that's handled by the auth machinery itself.