Further secure stuff for UserController.