Defer to other user

I've just quickly thrown this together based on issue #62 and a few ideas I had at the time. It's not really tested, and probably full of security holes, so I'd appreciate it if someone could check that stuff before merging :smile: