Do not rely on user.name from JWT