fixed a few User class bugs, allow null values in the user object for the nonce value