User needs to be in []

req.user should be an array; if it isn't, put it into
an array.