Handle the case where there is no user attribute on the request.
(e.g., if CommonMiddleware performs a URL rewrite)