so what happens if someone not logged in goes to this url? There's no user and the return will blow up about there's not being a user defined.