Update setAuthUser to support non-sessions use auth