#59: add setPassword model API
#59: encrypt passwords