change request.user to user