use state.user.message_history instead of state.log for status messages
 - allows /info on your own user
 - removes duplicated code

also notify and handle authorization requests within the user context (fixes #24)