adjustments of user model, login functionality and password security