removed secure password functionality out of User model and into SecurePassword