Whoops, we shouldn't be leaking the user object.