user object from db not user