user.password => BCrypt
Refactoring