assign global user obj in auth controller