If user is unspecified in the conf then it will be null which will mess up auth because it will do a getUser and see NULL and decide it's not an authed session.