because I use the `$user` object on `views/bot/update.php`