The user should never move to another MC in a cluster. It always should remain on the same controller, no matter what access point it roams to.
On the MM, the command
show global-user-table list
should show you what controller a user is on. It should not change, in a cluster. If your user has to reauthenticate, your cluster might be misconfigured.