apply expansions to user deserialization [Fixes #10]

Apply the same expansion to `deserializeUser()` as in the `authenticate()` call.  Fixes #10 .


I see Github's editor also added a newline at EOF.