cleaned up nefarious "hack" in users.c