made User attributes private.