AuthenticatedUser not to expose internal implementation