users attrs are hash, not array