How it works
The API currently allows deposits to be created with a reference to a user that does not exist. This is incorrect data and creates problems.
Improvement suggestion
Make the "user" field required for deposits and verify that the user exists when saving a deposit.