Store user in request context (not session).