User: move checkPassword from User to Manager to not break API