I think all we need is the UserInfo because User is more relevant to controlling the User's application state.