added user.deauthorized_at timestamp