You need to pass user along to the attack_hand()