removed password field from user table