Auth methods now only use user and resource IDs