Extract EncryptedUser functionality for use in other controllers

I'm trying to come up with a better name than `EncryptedUser`. `ProvidedTokenUser`? `TokenBasedUser`?