Postgess security around user