hash password
update user wo password
authentication password encoder
enable user
exclude password from search