the user.User can now have custom, user-defined parameters stored to the auth cookie