Super-user magic must happen by id, not by name.
This may be required by other PAS plugin changes, as now SUPER_USER has
an id but no login.
Also, this requires more work on special users, to see if we can test them
by id and not by login, as well.