move login user to User.js
temperarely disable assets query on log in