Commented Issue: Make User property of ApiController testable [971]

Make the User property of ApiController virtual so that it can be mocked or add a setter so that it can be setup for test.
Comments: We should consider making all the properties on ApiController virtual. That would be a super quick fix that would allow proper mocking.