Move currentUser to authentication file, add header auth