#8 also resolve 'CurrentUser' for convenience (can then be injected in all controllers)
#8 log error message in browser if loaded user object does not meet expectations