CurrentUser final class

Who the request is, as the reference settles it before init: the user determine_current_user names (the engine's own session, through wp_validate_auth_cookie, when no plugin hooks it), which the request's reader then follows. A plugin that signs in by its own token or cookie (JWT, OAuth, single sign-on) is heard; one that names nobody signs the request out.