make userAccount ctor public; cleanup access modifiers