user name & email can be null