for everyauth to find the current user
need to access body for non-GET requests
adding auth(orization|entication)