Use late-bound foreign key for User to avoid circular import.