UserFromRequest.user now takes a RequestHeader (superclass of Request)

This is so that it can be used in play's Global.onHandlerNotFound which is passed a RequestHeader