Refactor user model and controller, remove passport serialization logging