added security to user json