moved principal security and update the user basic info