- remove Group and UserGroups (should be handled by dedicated app, if even) - enforce User.Schema() include-fields