Add reflector references between User and Authorization models instead of direct links

Should allow for basic namespacing in the future
Allow for namespaced user and authorization models in sessions, providers and techniques
Documentation updates