Correctly return the user when using Auth (#8)