Updated security routines to use user object for passing data instead of String array.