defensively check for user object