refactor Sso to get user before force auth