User entity, security & password compat