guard against being logged out and getting no user data back