add user entity and security