Added password spec for User