covert user.pk to str, support mongoengine

if django db backends user mongoengine, coverting `user.pk` to str can work well.