use real user object instead of hash`