restricted access to :user
dried user model