check for current user on current_user_can
make disqus auth work w mongoengine