T004 authentificate user with db storage

Why `$user` isn't required here?