Returns the user which has authenticated through the app. Can also be an anonymous user if authorization is not required for the endpoint