[auth-browserid] [user] fixed user var