fixed user matching err and add user object to req.AV.user