fix tests, mock current_user to fake login user before any request