I can get the session from the request.

Now I just need to be able to get the user from the system. Then the
private poi from the user.