Ensure that, if old_user doesn't exist, it's ignored
Properly set + clear su_auth_user_id