Include user in auth response