Added /user to disallowed urls
Merge pull request #137 from rossjones/master

Added /user to disallowed urls