Extract the user from the request object