added user.model sets_allowed