Client side Authentication & some cleaning up

User.getPassword() added