any reason to use an instance variable (@user) here?