Bug refs #1770: fix user model, remove login credentials