refactor(user): make user only visible to logged in user