auth: store global user metadata in User object