oops, user_manager is unavailable here, need to use
current_app.user_manager