added user current endpoint, that wrangles username from headers