save all attributes on req.user
merge branch 'auth'