Fix the stop-on-redirect debug mode

When using that mode, the rendering of the "stop" page was failing in
the generation of CSRF tokens, because it was using a fake
PhabricatorUser not properly set up.

It will now try to reuse the current user, and otherwise properly set
up the PhabricatorUser.