def user no longer receives req and one must pull from request.oauth. See 90b08a734e134bb392a2942eb9559403d019d188