i think use= param is a typo, but i also think you don't need it, since this is ajax and the user comes from auth.   (the operation is working for me in manual tests)