Pass req params to model.getUserFromClient, so the model can handle how to find the correct user for the authorization request.