set user in request if authenticated by token