added optional access_secret field to User model