code: function(auth){
        // nothing to invert
        if(!auth || !auth.user){
          return auth;
        }
  
        var u = auth.user;
        delete(auth.user);
        u.auth = auth;
        return u;
      }
docs: Inverts the auth object so we don't need to run another query
  
  @param  {Object} auth Auth object
  @return {Object}      User object
  @api private