Use an auth.user fixture for simplicity