Card #226 add and remove user information security and tests