rest method for getting current logged in user, admin checking