changed to email, password, user