Go back to returning UserRes in auth package on register and login (others to follow); some fixes for mysql auth. Refactor restapi user package a little.