Add unique constraint on username.
Add test on password encryption.
Reorder components for User result class to ensure that password is encrypted.