should this be a `*User`?