Get user from request and put in authz attribs.

Added integration tests for user-based auth.