switch hardcoded user out for db retrieved user