Return user instead of a boolean on successful authentication