Make it easier to retrieve information about the currently-logged-in user.
Remove roles from the request security object, they've never been used.
Display user information in the header.