[fix] moved password hashing to User updater
[cleanup] organized imports
[cleanup] added guava dependency