Implement FetchUser() and /auth