worked on password for User model