user model: get_auth now forced old-version serialization in tcrypt, meaning logins are no longer broken =]