return orm.User from get_current_user

rather than name.

removes need for `get_user` wrapper