there is no way a user could not be null in the current implementation