add UserParamConverter

UserParamConverter checks your Controller for parameters named `$user` and injects the current user from `SecurityContext` (if it exists)