Held by AuthProvider and stored here. It is the AuthResponse of a sign-in or sign-up, except that one stored before media tokens existed has none until AuthProvider fetches it. AuthProvider adds the user's settings once it has read them from the server, and useSettings keeps them current.