Lockdown user model permissions

Nevermind. I just saw the `gateway` commit ;) https://github.com/zoopcommerce/gateway-module/pull/3/files#diff-dd418b1d992a473cea0df129bd44e07fR124