Comment 3 for bug 1817645

Force-pushed a few tweaks (like returning the user object on successful patron auth so that future handlers can use it). And now I'm un-assigning myself from this bug and leaving it alone for review.