return user=nil if user is not signed in