Session management is done with Api::User against a live backend API.

Now deprecating the AR User model...