Added some additional security defaults
User resource