in a middleware User.get(id, function(err, user){