I think we should check if user is nil first.
Got a panic here when I tried to show my commit page without login.