fork to allow non-GenericUser through config auth.user_class