title: How do I better get current user id in Loopback
body: <p>As the <code>loopback.getCurrentContext()</code> has long-living unstability problems and deprecated currently, how can I make sure that when a user performs some operations via API endpoints, I know how to identify him?</p>
  
  <p>May be I can send the token id in the request payload and check it? What if user fakes it? What are alternatives to those hacky solutions from the issues page on Github?</p>