added IllegalStateException to User.save()