Should always fallback on current user, if no user is supplied. This code path will not be executed if there's no one logged in, so its a pretty safe bet.