Card #226 add and remove user feature security