Parts of Drupal still require a global user object.

- Fixes issue #957.
- Increases bootstrap level of the `user-cancel` command