add more password related functions for User model