Fix user serialization on auth