Now checks authorization header for token to get the current user