User can be null in case a user hasn't logged in yet.