return req.user