upsert users upon auth