understand the user of req.currentUser. which is only used in server between middleware and finaly call.
and add a function to proxy of LoginToken