Updated user schema to use async password validation