more rubustness when user dir is not writable (see #54