more robust user lookup