Update UserService, fix user password