security for no results in user table