cleanup auth code to require an implementation of authUser when
  extending BB
BOOK-560