added hardcoded password to User