Don't like the idea of the hash being stored with the user object upon retrieval..but don't have time to rewrite all of that