[api] avoid crash if no package is found
[api] test User.find_by_class

Make sure users without relationships do not see all requests in
existance