On Wed, Sep 05, 2018 at 06:36:20PM -0400, Alex Balashov wrote:
Just grab it right before the consume_credentials()
block, after all the challenge stuff.
consume_credentials() doesn't reset/clear $au, so anywhere after the
first if or after the route(that authenticates) will do.