add password field back to user service