feat(userModel): setPassword without saving user model