user table password up to 40 char