get user from acl_users (plone.api.user was doing wrong here, at least in testing context)