changed getters in UserDAL to restrict access