Auth now uses id and email from smf.