use provided $USER if available, let the caller do the update (safer)
1 file changed