tighten access to user account properties
allow DbContext ctor param