qc::session*, qc::auth* etc now based on user table instead of employee table