added more stringent checks for toUser