feat(auth): add current logined user to httpheader