add some styling and make user password nontransferable with IgnoreJson annotation
add new message