removing user is not necessary, since userAccessDao.put can update the data