adding encryption of passwords to User model