return {} unless the user is found.
logging