Pull authenticated user by primary key

instead of the non-existant user_id property.
Added a user_id AutoProperty to auth.User.
Removed the `User.user_id` property.

Closes #152, #154.
Fixed test_auth_backend.