manage_users: login_as + auth_user synchronized in secret key generation, now working better