Load user from token, not from username

This modification enables updating user object (stored elsewhere) with data from shibboleth headers.