`auth.user` doesn't have any information not already in `users`.