change User model fields and permitted this in application_controller