current user may be None