added to docs and default config:
    $user = $authority->getCurrentUser();

removed `$user` from being passed into initialize function