removed mvps from the app and removed 'password' from the users table