Removing the unnecessary authority prperty from User as the list of authorities will do just fine