extracts user authentication into service object