seperate all auth from user objects