Stricter user lookup when the engine is not a HTTPFriendlyEngine