change protected to public on user model