wip(auth): override equals & hashCode