Remove the superfluous Player class.
Prevent the User class from hashing a password more than once.