add userFullName instead of userId to authentication response