should a user have a first_name and a last_name? Is it a required field? Should we match null constraints?