Authorization logic.
Changes to users viewmodels.