Moved to named Logger.
Comment typo.
Match custom User from Identity. WithClasseEditRight authorisation check
makes use of User parameter instead userId thus prevents hitting the
database. User instance is transparently cached up front thus not
hitting the database either.