add a TODO. also, won't this contain `_user=undefined` if the user hasn't logged in to commbadge?