change AV.User.current() to req.AV.user