user data published with restricted fields including email