fix(auth): add a hack to make sure the fake user is properly logged in