Added getCurrentUser() for validating session tokens