save user in request.resource_owner (solution by @ib-lundgren)