updated user entity, added file uploading restrictions