Moved _imageUrl to imageUrl method, made _email & _hash private