Core : updated Auth (User, UserRole)