pass ResponseWriter to CurrentUser function