added to user schema, hid phone number from everyone but super