Auth token user should be more prioritized

This change was caused by periodical confusing of anybody testing API. If the tester is logged in django-admin, the django-admin user displaces the token's one