auth.user: 编码查询串