add protected fields in user