0.2.3 fixed oversighted auth.user