Update User.java to just work with username and password