It's valid to call GetUser with no UserName; return the User for the current creds