Security: fix issue when user has not created a collection