Make sure auth()'s type is properly resolved

[ymc9]

Currently, result type of auth() function is weakly resolved because it needs to refer to the User model defined by user. We should actually let it resolve to the user-defined User model.