user: ask the OS about the home of the current user

This is more reliable than getting the environment variable. It's
important to notice that the function falls back to the environment
variable, if it cannot get the home directory from the operating system
(when cgo is disabled and we're not on Windows, for instance).