ensure that migration script is a bit more rubost for audit uses, refs #1700

(sadly the audited gem alias the .user method, and sometime returns
strings and other times return a user object)