If there is no information for this user, we should create it, not
sending a forbidden error