use user object instead of user id