User model changed not to expose password (non-enumerable property)