Updated User model for password auth, got rid of header auth