ensure user is not nil