restricting access to sensitive data, preparing to add user delete and update functionality