<% # expects @user to be set %>