invalid parameters: user is not logged in or is not the correct user