Close #57 + externalized extractAuthUser method to avoid code duplication