Added login to return full user object if successful.