Extract EncryptedUser functionality for use in other controllers

That last one sounds good