Return user data with login
Add middleware that sets ctx.req.user to an anonymous user