user page can be accessed quite easily anyways