user is ambiguous, should be called userName or userId.