made user model secure