delete user pass before put to db