changed request.user to user