T004 authentificate user with db storage

I think it would be better `!$user instanceof User`