So, yup, all it needed was a good nights sleep... Funnily enough you can't get the authenticated user unless you're in a folder which is using authentication... (in my defence though, it was a totally different variable too).

Now the ajax stuff is being miffy again, roll on the weekend.