Added user to Auth return so caller didnt have to make a second call to
get user info.