bug fix in user.rb