by default, that is empty = no user claims