declare the members in User as const and take out built in write protection from types::SecureString