Stricter check to web user loading

Make sure the decoded response is a table.