defp authorized_employee(conn, user_auth) do
  Auth0Service.update_user_metadata(user_auth.user)

  conn = Guardian.Plug.api_sign_in(conn, user_auth, :access, perms: %{employee: [:full]})
  jwt = Guardian.Plug.current_token(conn)
  user_with_department = Repo.preload(user_auth.user, :department)

  conn
  |> put_status(201)
  |> render(NP.API.UserView, "show.json", user: user_with_department, jwt: jwt)
end