safer "$c->user"