Found out that User.signup was not actually returning a valid User instance (missing username). Fixed and improved test to catch the problem.