Moves User to Common.
Adds ClaimsApiControllerBase to share auth code between controllers.
Adds query for getting user info.