Fix destroy order

`recipe_list` is referenced by `user`. If `recipe_list` is destroyed
before `user`, `user` has a dangling pointer.