array was used instead of set for auth synchronizable models so they could be duplicated