UserManager uses Model\Passwords