Update user.php

visiblity of _insertUser changed to private