User model that I don't include in my auth flow for obvious reasons - what's the go here?onAfterSignupHook instead? I presume I'll need to hit the api twice if so - once in onBeforeSignup to verify, and once again in onAfterSignup to add additional properties.