refactored user model, uses update_attributes now