Added missing Spring Security fields to User class.
Changed param map from <String,String> to <String,Object> so that
non-strings can be persisted.