fix: stop leaking User into API handlers unless authorized#10172

spikecurtis merged 1 commit intomaincoder/coder:mainfrom

10-10-use_member_instead_of_usercoder/coder:10-10-use_member_instead_of_userCopy head branch name to clipboard