Cut out unnecessary User imports.
Rename user.js, stop passing around auth.