it was shitty all over. Should only accept user. fixed