removed verifyPassword and buildPassword