learning the hard way that usrCtx in validate_doc_update is not a _full_ user doc from _users