diff --git a/signup/mixins.py b/signup/mixins.py
index 91ed08f..df3ae10 100644
--- a/signup/mixins.py
+++ b/signup/mixins.py
@@ -183,6 +183,7 @@ def find_candidate(self, **cleaned_data):
         email = cleaned_data.get('email')
         phone = cleaned_data.get('phone')
 
+        user = None
         if username:
             try:
                 user = self.model.objects.find_user(username)
diff --git a/testsite/fixtures/default-db.json b/testsite/fixtures/default-db.json
index fe11406..2981cf0 100644
--- a/testsite/fixtures/default-db.json
+++ b/testsite/fixtures/default-db.json
@@ -292,4 +292,25 @@
       "username": "xia18"
     },
     "model": "auth.User", "pk": 18
+},
+{
+    "fields": {
+      "slug": "testsite",
+      "cors_restricted": false,
+      "authentication": 0,
+      "registration": 3,
+      "session_backend": 2,
+      "entry_point": "http://localhost:8040",
+      "enc_key": ""
+    },
+    "model": "rules.App", "pk": 1
+},
+{ "fields": {
+    "app": 1,
+    "rank": 1,
+    "path": "/",
+    "rule_op": 0,
+    "is_forward": false
+  },
+  "model": "rules.Rule", "pk": 1
 }]
diff --git a/testsite/requirements.txt b/testsite/requirements.txt
index aabf085..f33f3f8 100644
--- a/testsite/requirements.txt
+++ b/testsite/requirements.txt
@@ -19,7 +19,7 @@ social-auth-app-django==5.2.0        # 5.2.0 drops support for Django<3.2
 # testsite-only
 coverage==7.2.1
 django-extensions==3.2.1
-djaodjin-rules==0.4.1
+djaodjin-rules==0.4.7
 gunicorn==20.1.0
 whitenoise==6.4.0