One just needs to overwrite the type. The user actually does contain the data from the user collection.
This seems to be the suggested approach as this is also shown in the auth example from payload