changed Request::getAttributes() order, closes #112; added User::getAttributes(), closes #113