changed Request::getAttributes() order, closes #113; added User::getAttributes(), closes #114