Removing user object, and just authentication. We may have an alternative method getDetails which will give the authenticated user details.