Make the authenticated user available via the request.
Set the user resolver on form requests.
Tweak user behavior.