PG users and groups vs supabase auth