--- a/iro/model/user.py	Mon Jan 30 06:44:39 2012 +0100
+++ b/iro/model/user.py	Mon Jan 30 06:51:28 2012 +0100
@@ -11,7 +11,7 @@
 
 @validate(kwd="apikey", func=vHash, minlength=15, maxlength=15)
 @dbdefer
-def getuser(apikey, session):
+def getuser(session, apikey):
     user = session.query(User).filter_by(apikey=apikey).first()
     if user is None:
         raise UserNotFound()