[#1709] fix to 'user is not defined' (for whomever is using this route, not
us. we need to clean up our api)