logged_user can be None