catch NPE in case the web server still knows about deleted users