Login returns full user object.