Do not set 'User' header to nil if user is not authorized

Open locations allow not authorized access, in which case 'User' header
should not be set.
New gem release