adding user2 with no privs