User passwords are now part of the Credentials class, added Repo::getUnitOfWork(), added some responses to the login controller, updated tests