Better expiry display in admin
Don't assume every request has a user attribute in response middleware.