Fixed security of users and owner_requests