You should also check if `$_SESSION[ 'user' ]` is set and is the same as `$user`