Update User.scala

Removed security flaws