refactored user class, moved key handling to key service
let user change secret key password