Passing current user to authenticated handlers, perhaps premature
refactoring