removed privacy setting, will be implemented using user login