current user from query string param for web app