fix _format_user_data to filter properties that users can edit