inject to runtime struct instead of sessionAuth.User