I've tried several stuffs a month ago or so but didn't manage..
There's not even an .Xauthority file..
Starting the xserver with -noauth doesn't even work.
There's something specific about this xserver, maybe there are some docs on the wiki explaining how this works.
It could be hard-coded for user "user"