and moved out the wrap-context middleware to the +servlet profile

Another question, in services.clj, where is the user in the following code defined?

(defapi service-routes
  (GET "/authenticated" []
       :auth-rules authenticated?
       :current-user user
       (ok {:user user}))