fixed bug in User.php