more reliable way to get user based on email & apps_domain when authenticated