Don't change session user when calling another user's API.