Protect user information

But only must be signed in