->cancel() has been modified to introduce the $user param like for other methods that modify a status.