small fix self -> cls for class method
auth: get_user_from_request without user model update.