Authentication with separate Authentications object belonging to User working. Destroy User and Sessions working.