I'm not certain it won't work to use $r->user, but I don't see the pointWell, I figured that the AuthenHandler already parsed the authentication cookie and declared it valid, so I didn't really see a point the in doing it at the beginning of every script. $r->user just seemed more intuitive to me.
when you already have a unique identifier in the cookie.
-Mike