[auth] [minor] initalize auth.setup to false
[auth] [auth-browserid] [user] refactored auth properties and serialization to user resource