login interceptor and user injection