Substitute User in favor of settings.AUTH_USER_MODEL to make it more auth-agnostic