def create_user(username):
user = User(username=username, permissions=DEFAULT_PERMISSIONS)
user.api_key = User.generate_api_key()
user.password = urandom(24).encode('hex')
user.session_token = generate_session_token(user)
user.enabled = True
user.save()
return user
