use CPasswordHelper in YdUser and cleanup YdApiControllerBehavior