bugfix to locus page, locus code assumes an *empty* user object for non-logged in...