fix top.js user obj injection, and tour modal currentUserOwns bug.