made more restrictions on user schema