Added password to new User() calls