refactor: use new forelse
allow null User
refactor: early return if not authenticated