Question (Solved)

only post-authentication handler should create/update `User` persisted entities