added app and app.user to header