hidden user id, guest username and password generation
removed password from user as it is stored in the credential
added value to define role
register
update user name