Auth rep returns user collection on remembered login
eagerload user meta on login
method protected
refactors building permissions