rename UserInfo to BasicUserInfo, add FIXME for secure string compare