Move password checking operation to `PasswordService`.
Add domains for User.
Add MVCGroup for User.
Add authentication and authorization.