Users now have a string field for email address
The login endpoint now returns the user object instead of a text string
Auth module now has a isLoggedIn endpoint that verifies the validity of the session and returns the user object