remove redundant constants
extract json property names in constants
add validation on persistence level
add encryption of a password on create user request
erase password on find method call