Move Auth data into User Object.
Auth check done only once