returning false if user not found