simple middleware to get the wink user id

incoming requests must be authenticated, so we make sure we have a real
user right away and insert its user_id