- Middleware should only set request.account, not request.user - Let DRF authentication handle request.user setting - This prevents conflicts between middleware and DRF authentication - Fixes /me endpoint returning wrong user issue