setFlags for users.

In order to be able to set Flags of other users than the currently authenticated one, I moved the functions from AuthUser to User class.