User class now has password, Role and Status are transient