don't assume there is a req.user in the debug statement. fixes #21