`request.user` is the same as the shorter form, `user`