use the user on req now