Actually, request.user might as well be set to a valid user. It's totally irrelevant. What we do care about is that the request is carried out anyway
Reordered methods
Renamed method finalize to finalize_pending