neither user_id or auth_type is unique on their ow...