Untangled auth from users and sessions.