return nil for current user if session user_id is not set