refactoring user -> userdetails only for autorization