explicitly delete user.password
0.10.16