returning blank user object if not signed in