Get or set the user lazily after the HTTP context has been created.
SessionAuthenticator. And make it the default.