`user` is already set. Let's trust the factory to return a valid record