Return authenticated user using /api/user endpoint