user auth reply as multi-part msg, second part is serialized tsUser