SQLUsers: fix User.password instantiation (pull value from DB)