plan
resorting to parent::_findUser to support std Auth settings