include the user in all Authenticated requests