cleanup in html templates: no longer need to pass the user. now it is an implicit parameter in the request header.