added readonly ro username and email