added user name to protected attributes