bugfix: unknown var 'user' used.