Fix object existence check in common serialiser

The check worked with SQLite but not with PostgreSQL.

In any case, since we have a user object here, there's no reason to not use it directly.

Part of #547 (closed)