Conversely, we can't store the *entire* user object, because that contains things like login tokens and expiration timestamps. A comfortable middle-ground is to create a "factory" that will build an object containing only the fields we need.