update User factory to have passwords