fixed a bundle of small bugs
added bidirectionality to the app_user relation