pull AuthUser into its own module

This is Yesod convention and allows for faster navigation.