added user/photo to auth
added new fields to user