bugfix: avoid side-effects when overriding User.default_retrieve_params