using $USER instead of explicit user for portability