user: fix auth_active?/1 for remote users