Consistent naming in /auth/whoami