refactoring - moved auth methods from request to user module