allow access to user json