allow setting a different user for api requests