Security: User model changes