band change owner(set_owner)
password hashing moved to user model