passing in user and not just user.id
passed in user instead of user_id