User-Level Differential Privacy With Few Examples Per User