added secure password to User