Use proper crud auth for subclassed users too