Added @Password

1. Added @Password which relies on `password_hash`
2. Fixed filter issues at update