This change to decrypt _handler
fixed an error where the newest user would always be selected