should handle first login when user is not yet an array