fixed deserialisation of user object