Extract the user from the request object
Optional
the key of the user object to extract, or omit for the entire user
Extract the user from the request object