Update request.auth instead of request.user #76

I was wondering why did you decide to set request.auth instead of request.user during the authentication step here:

https://github.com/vitalik/django-ninja/blob/master/ninja/operation.py#L100

When I intuitively try to access request.user I always get AnonymousUser . I mean, I always saw that other libraries set request.user , and when necessary they set some other request attributes besides user .

Is that really intended? What is the reason for that?

Thanks for your work on this library, by the way. Nice job!