Use user references and the current user in the REST API

The code should use UserReference instead of strings to represent users as strings can be very error-prone in particular with subwikis. Also, the current user needs to be taken from the context, not as parameter on the API.