Do not rely on user.name from JWT - part 2